@classytic/arc 2.8.1 → 2.8.3

package/dist/{interface-CS6d7HiB.d.mts → interface-BVuMfeVv.d.mts}

@@ -1,6 +1,6 @@
-import { r as RequestScope } from "./types-CN6JvmYz.mjs";
-import { n as FieldPermissionMap } from "./fields-DoeDgh2b.mjs";
-import { i as UserBase, t as PermissionCheck } from "./types-BoaZHr-2.mjs";
+import { r as RequestScope } from "./types-C72d3NDn.mjs";
+import { n as FieldPermissionMap } from "./fields-DC4So2M2.mjs";
+import { i as UserBase, t as PermissionCheck } from "./types-CVC4HOKi.mjs";
 import { FastifyInstance, FastifyPluginAsync, FastifyReply, FastifyRequest, RouteHandlerMethod, RouteHandlerMethod as RouteHandlerMethod$1 } from "fastify";
 
 //#region src/hooks/HookSystem.d.ts
@@ -839,6 +839,7 @@ declare class ResourceDefinition<TDoc = AnyRecord> {
    */
   readonly routes?: readonly RouteDefinition[];
   readonly middlewares: MiddlewareConfig;
+  readonly routeGuards?: RouteHandlerMethod$1[];
   readonly disableDefaultRoutes: boolean;
   readonly disabledRoutes: CrudRouteKey[];
   readonly actions?: ActionsMap;
@@ -956,7 +957,7 @@ declare class ResourceRegistry {
 /**
  * Minimal server accessor — exposes safe, read-only server decorators.
  * Allows controller handlers to publish events, log, and audit
- * without switching to `wrapHandler: false`.
+ * without switching to `raw: true`.
  */
 interface ServerAccessor {
   /** Event bus — publish domain events from any handler */
@@ -1069,7 +1070,7 @@ interface IRequestContext<TBody = unknown, TParams extends Record<string, string
   metadata?: TMetadata;
   /**
    * Fastify server accessor — publish events, log, and audit
-   * from any handler without switching to `wrapHandler: false`.
+   * from any handler without switching to `raw: true`.
    *
    * @example
    * ```typescript
@@ -1105,7 +1106,7 @@ interface IControllerResponse<T = unknown> {
  * Controller handler — Arc's standard pattern.
  *
  * Receives a request context object, returns IControllerResponse.
- * Use with `wrapHandler: true` in additionalRoutes.
+ * Use with `raw: false` in routes.
  *
  * **Generic parameters:**
  * - `TResponse` — shape of `IControllerResponse.data` (default: `unknown`)
@@ -1137,12 +1138,12 @@ interface IControllerResponse<T = unknown> {
  *   return { success: true, data: product };
  * };
  *
- * additionalRoutes: [{
+ * routes: [{
  *   method: 'POST',
  *   path: '/products',
  *   handler: createProduct,
  *   permissions: requireAuth(),
- *   wrapHandler: true,  // Arc wraps this into Fastify handler
+ *   raw: false,  // Arc wraps this into Fastify handler
  * }]
  * ```
  */
@@ -1151,7 +1152,7 @@ type ControllerHandler<TResponse = unknown, TBody = unknown, TParams extends Rec
  * Fastify native handler
  *
  * Standard Fastify request/reply pattern.
- * Use with `wrapHandler: false` in additionalRoutes.
+ * Use with `raw: true` in routes.
  *
  * @example
  * ```typescript
@@ -1161,12 +1162,12 @@ type ControllerHandler<TResponse = unknown, TBody = unknown, TParams extends Rec
  *   return reply.send(file.buffer);
  * };
  *
- * additionalRoutes: [{
+ * routes: [{
  *   method: 'GET',
  *   path: '/files/:id/download',
  *   handler: downloadFile,
  *   permissions: requireAuth(),
- *   wrapHandler: false,  // Use as-is, no wrapping
+ *   raw: true,  // Use as-is, no wrapping
  * }]
  * ```
  */
@@ -1596,7 +1597,7 @@ declare module 'fastify' {
 /**
  * Typed Fastify request with Arc decorations.
  *
- * Use this in `wrapHandler: false` handlers instead of `(req as any).user`.
+ * Use this in `raw: true` handlers instead of `(req as any).user`.
  *
  * @example
  * ```typescript
@@ -2027,11 +2028,26 @@ interface ResourceConfig<TDoc = AnyRecord> {
    */
   fields?: FieldPermissionMap;
   middlewares?: MiddlewareConfig;
-  /** @deprecated Use `routes` instead. Will error in v3. */
-  additionalRoutes?: AdditionalRoute[];
   /**
-   * Custom routes — the v2.8 way to add endpoints beyond CRUD.
-   * Replaces `additionalRoutes` with cleaner naming and no `wrapHandler` boolean.
+   * PreHandler guards auto-applied to **every** route on this resource
+   * (CRUD + custom `routes` + preset routes). Runs after auth/permissions,
+   * before per-route `preHandler`. Use for mode gates, tenant checks,
+   * feature flags — anything that applies to every endpoint.
+   *
+   * @example
+   * ```typescript
+   * defineResource({
+   *   routeGuards: [requireFlowMode('standard')],
+   *   routes: [
+   *     { method: 'GET', path: '/', raw: true, handler: listHandler },
+   *     // guard runs automatically — no per-route boilerplate
+   *   ],
+   * });
+   * ```
+   */
+  routeGuards?: RouteHandlerMethod[];
+  /**
+   * Custom routes beyond CRUD. Presets also merge their routes here.
    *
    * @example
    * ```typescript
@@ -2697,7 +2713,8 @@ interface PresetHook {
 }
 interface PresetResult {
   name: string;
-  additionalRoutes?: AdditionalRoute[] | ((permissions: ResourcePermissions) => AdditionalRoute[]);
+  /** Preset routes — merged into the resource's `routes` array. */
+  routes?: RouteDefinition[] | ((permissions: ResourcePermissions) => RouteDefinition[]);
   middlewares?: MiddlewareConfig;
   schemaOptions?: RouteSchemaOptions;
   controllerOptions?: Record<string, unknown>;
@@ -2892,6 +2909,8 @@ interface CrudRouterOptions {
    * Set to `false` to disable rate limiting for this resource.
    */
   rateLimit?: RateLimitConfig | false;
+  /** PreHandler guards applied to every route (CRUD + custom + preset). */
+  routeGuards?: RouteHandlerMethod[];
 }
 interface ResourceMetadata {
   name: string;
@@ -2901,7 +2920,17 @@ interface ResourceMetadata {
   module?: string;
   permissions?: ResourcePermissions;
   presets: string[];
-  additionalRoutes?: AdditionalRoute[];
+  customRoutes?: Array<{
+    method: string;
+    path: string;
+    handler: string;
+    operation?: string;
+    summary?: string;
+    description?: string;
+    permissions?: PermissionCheck;
+    raw?: boolean;
+    schema?: Record<string, unknown>;
+  }>;
   routes: Array<{
     method: string;
     path: string;

package/dist/loadResources-Bksk8ydA.mjs

@@ -0,0 +1,154 @@
+import { t as __exportAll } from "./chunk-BpYLSNr0.mjs";
+import { readdir } from "node:fs/promises";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath, pathToFileURL } from "node:url";
+//#region src/factory/loadResources.ts
+/**
+* loadResources — Auto-discover resource files from a directory.
+*
+* Scans for `*.resource.{ts,js,mts,mjs}` files, imports each,
+* and collects their default exports. No barrel file needed.
+*
+* @example
+* ```ts
+* import { createApp, loadResources } from '@classytic/arc/factory';
+*
+* // Recommended: import.meta.url — works in both src/ (dev) and dist/ (prod)
+* const app = await createApp({
+*   resources: await loadResources(import.meta.url),
+*   auth: { type: 'jwt', jwt: { secret: process.env.JWT_SECRET } },
+* });
+*
+* // Or explicit path (must match runtime layout)
+* const app2 = await createApp({
+*   resources: await loadResources('./src/resources'),
+* });
+* ```
+*
+* File convention:
+* ```
+* src/resources/
+*   product/product.resource.ts    → export default defineResource({ name: 'product', ... })
+*   order/order.resource.ts        → export default defineResource({ name: 'order', ... })
+* ```
+*/
+var loadResources_exports = /* @__PURE__ */ __exportAll({ loadResources: () => loadResources });
+/**
+* Scan a directory for resource files and import their default exports.
+*
+* Accepts a directory path OR `import.meta.url` (file:// URL).
+* When given a URL, resolves to the directory containing that file —
+* so `loadResources(import.meta.url)` works in both dev (`src/`) and
+* production (`dist/`) without path gymnastics.
+*
+* @param dir - Directory path, or `import.meta.url` (file:// URL resolved to its dirname)
+* @param options - Pattern and recursion options
+* @returns Array of resource definitions (anything with `.toPlugin()`)
+*
+* @example
+* ```ts
+* // Works from both src/ and dist/ — resolves relative to the calling file
+* await loadResources(import.meta.url);
+*
+* // Subdirectory relative to the calling file
+* await loadResources(import.meta.url, { suffix: '.resource' });
+*
+* // Explicit path (must match runtime layout)
+* await loadResources('./src/resources');
+* ```
+*/
+async function loadResources(dir, options = {}) {
+	const { suffix = ".resource", recursive = true, exclude, include, silent = false } = options;
+	const files = await collectFiles(resolve(dir.startsWith("file://") ? dirname(fileURLToPath(dir)) : dir), new RegExp(`${escapeRegex(suffix)}\\.(ts|js|mts|mjs)$`), recursive);
+	files.sort();
+	const includeSet = include ? new Set(include) : null;
+	const excludeSet = exclude ? new Set(exclude) : null;
+	const skipped = [];
+	const failed = [];
+	const isWindowsPath = (p) => /^[a-z]:[\\/]/i.test(p);
+	const results = await Promise.all(files.map(async (file) => {
+		let mod;
+		let primaryError;
+		try {
+			mod = await import(pathToFileURL(file).href);
+			return {
+				file,
+				mod
+			};
+		} catch (err) {
+			primaryError = err;
+		}
+		if (!isWindowsPath(file)) try {
+			mod = await import(file);
+			return {
+				file,
+				mod
+			};
+		} catch {}
+		const err = primaryError;
+		const code = err.code;
+		const msg = err instanceof Error ? err.message : String(err);
+		if (code === "ERR_MODULE_NOT_FOUND" && msg.includes(".js")) failed.push(`${file}: ${msg}\n    Hint: This file uses .js extension imports (TypeScript ESM convention).
+    • Production: ensure your build compiles .ts→.js before loadResources() runs.
+    • Node.js: use tsx, ts-node/esm, or a build step.
+    • Vitest: nested .js→.ts resolution may fail through dynamic imports.
+      Workaround: use import.meta.glob to preload resources statically.
+      See: https://github.com/classytic/arc/blob/main/docs/production-ops/factory.mdx#vitest-limitation`);
+		else failed.push(`${file}: ${msg}`);
+		return null;
+	}));
+	const resources = [];
+	for (const result of results) {
+		if (!result) continue;
+		let resource = result.mod.default ?? result.mod.resource;
+		if (!resource || typeof resource.toPlugin !== "function") {
+			for (const value of Object.values(result.mod)) if (value && typeof value === "object" && typeof value.toPlugin === "function") {
+				resource = value;
+				break;
+			}
+		}
+		if (!resource || typeof resource.toPlugin !== "function") {
+			skipped.push(result.file);
+			continue;
+		}
+		const name = resource.name;
+		if (name) {
+			if (includeSet && !includeSet.has(name)) continue;
+			if (!includeSet && excludeSet?.has(name)) continue;
+		}
+		resources.push(resource);
+	}
+	const log = silent ? void 0 : options?.logger;
+	if (log) {
+		if (failed.length) {
+			log.warn(`[arc] loadResources: ${failed.length} file(s) failed to import:`);
+			for (const f of failed) log.warn(`  - ${f}`);
+		}
+		if (skipped.length) {
+			log.warn(`[arc] loadResources: ${skipped.length} file(s) skipped (no default export with toPlugin):`);
+			for (const f of skipped) log.warn(`  - ${f}`);
+		}
+	}
+	return resources;
+}
+async function collectFiles(dir, pattern, recursive) {
+	const results = [];
+	let entries;
+	try {
+		entries = await readdir(dir, { withFileTypes: true });
+	} catch {
+		return results;
+	}
+	for (const entry of entries) {
+		const name = String(entry.name);
+		const fullPath = join(dir, name);
+		if (entry.isDirectory() && recursive) results.push(...await collectFiles(fullPath, pattern, recursive));
+		else if (entry.isFile() && pattern.test(name)) results.push(fullPath);
+	}
+	return results;
+}
+function escapeRegex(str) {
+	return str.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+//#endregion
+export { loadResources_exports as n, loadResources as t };

package/dist/{mongodb-B1eVtFhw.d.mts → mongodb-B8U2xaLj.d.mts}

@@ -1,4 +1,4 @@
-import { i as UserBase } from "./types-BoaZHr-2.mjs";
+import { i as UserBase } from "./types-CVC4HOKi.mjs";
 
 //#region src/audit/stores/interface.d.ts
 type AuditAction = "create" | "update" | "delete" | "restore" | "custom";

package/dist/{mongodb-NShVZDMr.d.mts → mongodb-X7LbEjTN.d.mts}

@@ -1,4 +1,4 @@
-import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-CkkWm5uR.mjs";
+import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-B-pe8fhj.mjs";
 
 //#region src/idempotency/stores/mongodb.d.ts
 interface MongoConnection {
@@ -15,6 +15,7 @@ interface MongoCollection {
     acknowledged: boolean;
     matchedCount: number;
     modifiedCount: number;
+    upsertedCount?: number;
   }>;
   deleteOne(filter: object): Promise<{
     deletedCount: number;
@@ -38,6 +39,10 @@ interface IdempotencyDocument {
   createdAt: Date;
   expiresAt: Date;
 }
+/** Minimal logger interface — compatible with console, pino, fastify.log */
+interface IdempotencyLogger {
+  warn(message: string, ...args: unknown[]): void;
+}
 interface MongoIdempotencyStoreOptions {
   /** Mongoose connection or MongoDB connection object */
   connection: MongoConnection;
@@ -47,6 +52,8 @@ interface MongoIdempotencyStoreOptions {
   createIndex?: boolean;
   /** Default TTL in ms (default: 86400000 = 24 hours) */
   ttlMs?: number;
+  /** Logger for operational warnings (default: console) */
+  logger?: IdempotencyLogger;
 }
 declare class MongoIdempotencyStore implements IdempotencyStore {
   readonly name = "mongodb";
@@ -54,6 +61,8 @@ declare class MongoIdempotencyStore implements IdempotencyStore {
   private collectionName;
   private ttlMs;
   private indexCreated;
+  private shouldEnsureIndex;
+  private logger;
   constructor(options: MongoIdempotencyStoreOptions);
   private get collection();
   private ensureIndex;

package/dist/{openapi-q6rNKfZy.mjs → openapi-CYCuekCn.mjs}

@@ -159,7 +159,7 @@ const DEFAULT_LIST_PARAMS = [
 function generateResourcePaths(resource, apiPrefix = "", additionalSecurity = []) {
 	const paths = {};
 	const basePath = `${apiPrefix}${resource.prefix}`;
-	if (resource.disableDefaultRoutes && (!resource.additionalRoutes || resource.additionalRoutes.length === 0) && (!resource.actions || resource.actions.length === 0)) return paths;
+	if (resource.disableDefaultRoutes && (!resource.customRoutes || resource.customRoutes.length === 0) && (!resource.actions || resource.actions.length === 0)) return paths;
 	if (!resource.disableDefaultRoutes) {
 		const disabledSet = new Set(resource.disabledRoutes ?? []);
 		const updateMethod = resource.updateMethod ?? "PATCH";
@@ -276,7 +276,7 @@ function generateResourcePaths(resource, apiPrefix = "", additionalSecurity = []
 		}, void 0, additionalSecurity);
 		if (Object.keys(itemPath).length > 0) paths[toOpenApiPath(`${basePath}/:id`)] = itemPath;
 	}
-	for (const route of resource.additionalRoutes || []) {
+	for (const route of resource.customRoutes || []) {
 		const fullPath = toOpenApiPath(`${basePath}${route.path}`);
 		const method = route.method.toLowerCase();
 		if (!paths[fullPath]) paths[fullPath] = {};

package/dist/org/index.d.mts

@@ -1,5 +1,5 @@
-import { Wt as RouteHandler } from "../interface-CS6d7HiB.mjs";
-import { i as UserBase } from "../types-BoaZHr-2.mjs";
+import { Wt as RouteHandler } from "../interface-BVuMfeVv.mjs";
+import { i as UserBase } from "../types-CVC4HOKi.mjs";
 import { InvitationAdapter, InvitationDoc, MemberDoc, OrgAdapter, OrgDoc, OrgPermissionStatement, OrgRole, OrganizationPluginOptions } from "./types.mjs";
 import { FastifyPluginAsync, RouteHandlerMethod } from "fastify";
 

package/dist/permissions/index.d.mts

@@ -1,4 +1,4 @@
-import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission } from "../fields-DoeDgh2b.mjs";
-import { a as getUserRoles, i as UserBase, n as PermissionContext, o as normalizeRoles, r as PermissionResult, t as PermissionCheck } from "../types-BoaZHr-2.mjs";
-import { A as RoleHierarchy, C as authenticated, D as publicRead, E as presets_d_exports, M as applyPermissionResult, N as normalizePermissionResult, O as publicReadAdminWrite, S as adminOnly, T as ownerWithAdminBypass, _ as requireScopeContext, a as allOf, b as roles, c as createDynamicPermissionMatrix, d as requireAuth, f as requireOrgInScope, g as requireRoles, h as requireOwnership, i as PermissionEventBus, j as createRoleHierarchy, k as readOnly, l as createOrgPermissions, m as requireOrgRole, n as DynamicPermissionMatrix, o as allowPublic, p as requireOrgMembership, r as DynamicPermissionMatrixConfig, s as anyOf, t as ConnectEventsOptions, u as denyAll, v as requireServiceScope, w as fullPublic, x as when, y as requireTeamMembership } from "../index-CBru2y5Y.mjs";
+import { a as applyFieldWritePermissions, i as applyFieldReadPermissions, n as FieldPermissionMap, o as fields, r as FieldPermissionType, s as resolveEffectiveRoles, t as FieldPermission } from "../fields-DC4So2M2.mjs";
+import { a as getUserRoles, i as UserBase, n as PermissionContext, o as normalizeRoles, r as PermissionResult, t as PermissionCheck } from "../types-CVC4HOKi.mjs";
+import { A as RoleHierarchy, C as authenticated, D as publicRead, E as presets_d_exports, M as applyPermissionResult, N as normalizePermissionResult, O as publicReadAdminWrite, S as adminOnly, T as ownerWithAdminBypass, _ as requireScopeContext, a as allOf, b as roles, c as createDynamicPermissionMatrix, d as requireAuth, f as requireOrgInScope, g as requireRoles, h as requireOwnership, i as PermissionEventBus, j as createRoleHierarchy, k as readOnly, l as createOrgPermissions, m as requireOrgRole, n as DynamicPermissionMatrix, o as allowPublic, p as requireOrgMembership, r as DynamicPermissionMatrixConfig, s as anyOf, t as ConnectEventsOptions, u as denyAll, v as requireServiceScope, w as fullPublic, x as when, y as requireTeamMembership } from "../index-CSkeivBx.mjs";
 export { ConnectEventsOptions, DynamicPermissionMatrix, DynamicPermissionMatrixConfig, FieldPermission, FieldPermissionMap, FieldPermissionType, PermissionCheck, PermissionContext, PermissionEventBus, PermissionResult, RoleHierarchy, UserBase, adminOnly, allOf, allowPublic, anyOf, applyFieldReadPermissions, applyFieldWritePermissions, applyPermissionResult, authenticated, createDynamicPermissionMatrix, createOrgPermissions, createRoleHierarchy, denyAll, fields, fullPublic, getUserRoles, normalizePermissionResult, normalizeRoles, ownerWithAdminBypass, presets_d_exports as permissions, publicRead, publicReadAdminWrite, readOnly, requireAuth, requireOrgInScope, requireOrgMembership, requireOrgRole, requireOwnership, requireRoles, requireScopeContext, requireServiceScope, requireTeamMembership, resolveEffectiveRoles, roles, when };

package/dist/plugins/index.d.mts

@@ -1,7 +1,7 @@
-import { K as MiddlewareConfig, Kt as ResourceRegistry, Tn as HookSystem, et as PresetHook, m as AnyRecord, p as AdditionalRoute, vt as RouteSchemaOptions } from "../interface-CS6d7HiB.mjs";
-import { t as ExternalOpenApiPaths } from "../externalPaths-BQ8QijNH.mjs";
-import { _ as cachingPlugin, a as versioningPlugin, c as MetricsOptions, d as SSEOptions, f as _default$6, g as _default$1, h as CachingRule, i as _default$7, l as _default$4, m as CachingOptions, n as errorHandlerPlugin, o as MetricEntry, p as ssePlugin, r as VersioningOptions, s as MetricsCollector, t as ErrorHandlerOptions, u as metricsPlugin } from "../errorHandler-DJ7OAB2V.mjs";
-import { t as TracingOptions } from "../tracing-xqXzWeaf.mjs";
+import { K as MiddlewareConfig, Kt as ResourceRegistry, Tn as HookSystem, et as PresetHook, m as AnyRecord, p as AdditionalRoute, vt as RouteSchemaOptions } from "../interface-BVuMfeVv.mjs";
+import { t as ExternalOpenApiPaths } from "../externalPaths-Bapitwvd.mjs";
+import { _ as _default$1, a as _default$7, c as MetricsCollector, d as metricsPlugin, f as SSEOptions, g as CachingRule, h as CachingOptions, i as VersioningOptions, l as MetricsOptions, m as ssePlugin, n as ErrorMapper, o as versioningPlugin, p as _default$6, r as errorHandlerPlugin, s as MetricEntry, t as ErrorHandlerOptions, u as _default$4, v as cachingPlugin } from "../errorHandler-CdZDavNH.mjs";
+import { t as TracingOptions } from "../tracing-DxjKk7eW.mjs";
 import { FastifyInstance, FastifyPluginAsync } from "fastify";
 import * as _$node_stream0 from "node:stream";
 
@@ -213,4 +213,4 @@ declare module "fastify" {
 declare const requestIdPlugin: FastifyPluginAsync<RequestIdOptions>;
 declare const _default$5: FastifyPluginAsync<RequestIdOptions>;
 //#endregion
-export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type CreatePluginDefinition, type ErrorHandlerOptions, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type RequestIdOptions, type SSEOptions, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, _default$1 as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, _default$2 as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, _default$3 as healthPlugin, healthPlugin as healthPluginFn, _default$4 as metricsPlugin, metricsPlugin as metricsPluginFn, replyHelpersPlugin, _default$5 as requestIdPlugin, requestIdPlugin as requestIdPluginFn, _default$6 as ssePlugin, ssePlugin as ssePluginFn, _default$7 as versioningPlugin, versioningPlugin as versioningPluginFn };
+export { type ArcCore, type ArcCorePluginOptions, type ArcPlugin, type CachingOptions, type CachingRule, type CreatePluginDefinition, type ErrorHandlerOptions, type ErrorMapper, type GracefulShutdownOptions, type HealthCheck, type HealthOptions, type MetricEntry, type MetricsCollector, type MetricsOptions, type PluginMeta, type PluginResourceResult, type RequestIdOptions, type SSEOptions, type TracingOptions, type VersioningOptions, _default as arcCorePlugin, arcCorePlugin as arcCorePluginFn, _default$1 as cachingPlugin, cachingPlugin as cachingPluginFn, createPlugin, errorHandlerPlugin, errorHandlerPlugin as errorHandlerPluginFn, _default$2 as gracefulShutdownPlugin, gracefulShutdownPlugin as gracefulShutdownPluginFn, _default$3 as healthPlugin, healthPlugin as healthPluginFn, _default$4 as metricsPlugin, metricsPlugin as metricsPluginFn, replyHelpersPlugin, _default$5 as requestIdPlugin, requestIdPlugin as requestIdPluginFn, _default$6 as ssePlugin, ssePlugin as ssePluginFn, _default$7 as versioningPlugin, versioningPlugin as versioningPluginFn };

package/dist/plugins/index.mjs

@@ -3,13 +3,13 @@ import { o as getOrgId } from "../types-AOD8fxIw.mjs";
 import { t as requestContext } from "../requestContext-DYvHl113.mjs";
 import { t as hasEvents } from "../typeGuards-CcFZXgU7.mjs";
 import { t as HookSystem } from "../HookSystem-BjFu7zf1.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-Dtcojmu8.mjs";
-import { n as caching_default, t as cachingPlugin } from "../caching-CHH-iHs3.mjs";
-import { t as errorHandlerPlugin } from "../errorHandler-Cw34h_om.mjs";
-import { n as metrics_default, t as metricsPlugin } from "../metrics-DuhiSEZI.mjs";
-import { t as replyHelpersPlugin } from "../replyHelpers-CXtJDAZ0.mjs";
-import { n as sse_default, t as ssePlugin } from "../sse-CD5Hghpu.mjs";
-import { n as versioning_default, t as versioningPlugin } from "../versioning-CPU_5Xfs.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-Dq3_zBQP.mjs";
+import { n as caching_default, t as cachingPlugin } from "../caching-CjybdRwx.mjs";
+import { t as errorHandlerPlugin } from "../errorHandler-mzqk4cGl.mjs";
+import { n as metrics_default, t as metricsPlugin } from "../metrics-TuOmguhi.mjs";
+import { t as replyHelpersPlugin } from "../replyHelpers-BLojtuvR.mjs";
+import { n as sse_default, t as ssePlugin } from "../sse-CJpt7LGI.mjs";
+import { n as versioning_default, t as versioningPlugin } from "../versioning-Cm8qoFDg.mjs";
 import { randomUUID } from "node:crypto";
 import fp from "fastify-plugin";
 //#region src/core/arcCorePlugin.ts

package/dist/plugins/tracing-entry.d.mts

@@ -1,2 +1,2 @@
-import { a as traced, i as isTracingAvailable, n as _default, r as createSpan, t as TracingOptions } from "../tracing-xqXzWeaf.mjs";
+import { a as traced, i as isTracingAvailable, n as _default, r as createSpan, t as TracingOptions } from "../tracing-DxjKk7eW.mjs";
 export { type TracingOptions, createSpan, isTracingAvailable, traced, _default as tracingPlugin };

package/dist/plugins/tracing-entry.mjs

@@ -44,7 +44,7 @@ try {
 function createTracerProvider(options) {
 	if (!isAvailable) return null;
 	const { serviceName = "@classytic/arc", serviceVersion, exporterUrl = "http://localhost:4318/v1/traces" } = options;
-	const resolvedVersion = serviceVersion ?? "2.8.1";
+	const resolvedVersion = serviceVersion ?? "2.8.3";
 	const exporter = new OTLPTraceExporter({ url: exporterUrl });
 	const provider = new NodeTracerProvider({ resource: { attributes: {
 		"service.name": serviceName,

package/dist/policies/index.d.mts

@@ -1,4 +1,4 @@
-import { t as PermissionCheck } from "../types-BoaZHr-2.mjs";
+import { t as PermissionCheck } from "../types-CVC4HOKi.mjs";
 import { FastifyReply, FastifyRequest } from "fastify";
 
 //#region src/policies/PolicyInterface.d.ts

package/dist/presets/index.d.mts

@@ -1,4 +1,4 @@
-import { Ht as IControllerResponse, Ut as IRequestContext, m as AnyRecord, on as PaginationResult, tt as PresetResult, ut as ResourceConfig } from "../interface-CS6d7HiB.mjs";
+import { Ht as IControllerResponse, Ut as IRequestContext, m as AnyRecord, on as PaginationResult, tt as PresetResult, ut as ResourceConfig } from "../interface-BVuMfeVv.mjs";
 import { MultiTenantOptions, TenantFieldSpec, multiTenantPreset } from "./multiTenant.mjs";
 
 //#region src/presets/ownedByUser.d.ts

package/dist/presets/index.mjs

@@ -1,3 +1,3 @@
 import { multiTenantPreset } from "./multiTenant.mjs";
-import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-BFrGvvjL.mjs";
+import { a as registerPreset, c as auditedPreset, d as ownedByUserPreset, i as getPreset, l as softDeletePreset, n as flexibleMultiTenantPreset, o as treePreset, r as getAvailablePresets, s as bulkPreset, t as applyPresets, u as slugLookupPreset } from "../presets-C2xgzW6x.mjs";
 export { applyPresets, auditedPreset, bulkPreset, flexibleMultiTenantPreset, getAvailablePresets, getPreset, multiTenantPreset, ownedByUserPreset, registerPreset, slugLookupPreset, softDeletePreset, treePreset };

package/dist/presets/multiTenant.d.mts

@@ -1,4 +1,4 @@
-import { E as CrudRouteKey, tt as PresetResult } from "../interface-CS6d7HiB.mjs";
+import { E as CrudRouteKey, tt as PresetResult } from "../interface-BVuMfeVv.mjs";
 
 //#region src/presets/multiTenant.d.ts
 /**

package/dist/{presets-BFrGvvjL.mjs → presets-C2xgzW6x.mjs}

@@ -41,13 +41,12 @@ function slugLookupPreset(options = {}) {
 	const { slugField = "slug" } = options;
 	return {
 		name: "slugLookup",
-		additionalRoutes: (permissions) => [{
+		routes: (permissions) => [{
 			method: "GET",
 			path: `/slug/:${slugField}`,
 			handler: "getBySlug",
 			summary: "Get by slug",
 			permissions: permissions.get ?? allowPublic(),
-			wrapHandler: true,
 			operation: "getBySlug"
 		}],
 		controllerOptions: { slugField }
@@ -65,13 +64,12 @@ function slugLookupPreset(options = {}) {
 function softDeletePreset() {
 	return {
 		name: "softDelete",
-		additionalRoutes: (permissions) => [{
+		routes: (permissions) => [{
 			method: "GET",
 			path: "/deleted",
 			handler: "getDeleted",
 			summary: "Get soft-deleted items",
 			permissions: permissions.list ?? requireRoles(["admin"]),
-			wrapHandler: true,
 			operation: "listDeleted"
 		}, {
 			method: "POST",
@@ -79,7 +77,6 @@ function softDeletePreset() {
 			handler: "restore",
 			summary: "Restore soft-deleted item",
 			permissions: permissions.update ?? requireRoles(["admin"]),
-			wrapHandler: true,
 			operation: "restore"
 		}]
 	};
@@ -153,13 +150,12 @@ function bulkPreset(opts) {
 	const maxCreateItems = opts?.maxCreateItems ?? 1e3;
 	return {
 		name: "bulk",
-		additionalRoutes: (permissions) => {
+		routes: (permissions) => {
 			const routes = [];
 			if (operations.includes("createMany")) routes.push({
 				method: "POST",
 				path: "/bulk",
 				handler: "bulkCreate",
-				wrapHandler: true,
 				operation: "bulkCreate",
 				summary: "Create multiple items",
 				permissions: permissions.create ?? requireAuth(),
@@ -190,7 +186,6 @@ function bulkPreset(opts) {
 				method: "PATCH",
 				path: "/bulk",
 				handler: "bulkUpdate",
-				wrapHandler: true,
 				operation: "bulkUpdate",
 				summary: "Update multiple items matching filter",
 				permissions: permissions.update ?? requireAuth(),
@@ -222,7 +217,6 @@ function bulkPreset(opts) {
 				method: "DELETE",
 				path: "/bulk",
 				handler: "bulkDelete",
-				wrapHandler: true,
 				operation: "bulkDelete",
 				summary: "Delete multiple items matching filter",
 				permissions: permissions.delete ?? requireAuth(),
@@ -259,13 +253,12 @@ function treePreset(options = {}) {
 	const { parentField = "parent" } = options;
 	return {
 		name: "tree",
-		additionalRoutes: (permissions) => [{
+		routes: (permissions) => [{
 			method: "GET",
 			path: "/tree",
 			handler: "getTree",
 			summary: "Get hierarchical tree",
 			permissions: permissions.list ?? allowPublic(),
-			wrapHandler: true,
 			operation: "getTree"
 		}, {
 			method: "GET",
@@ -273,7 +266,6 @@ function treePreset(options = {}) {
 			handler: "getChildren",
 			summary: "Get children of parent",
 			permissions: permissions.list ?? allowPublic(),
-			wrapHandler: true,
 			operation: "getChildren"
 		}],
 		controllerOptions: { parentField }
@@ -341,8 +333,8 @@ function validatePresetCombination(presets) {
 	const routeMap = /* @__PURE__ */ new Map();
 	for (const preset of presets) {
 		const name = preset.name ?? "unknown";
-		const routes = typeof preset.additionalRoutes === "function" ? preset.additionalRoutes({}) : preset.additionalRoutes ?? [];
-		for (const route of routes) {
+		const presetRoutes = preset.routes ? typeof preset.routes === "function" ? preset.routes({}) : preset.routes : [];
+		for (const route of presetRoutes) {
 			const key = `${route.method} ${route.path}`;
 			const existing = routeMap.get(key);
 			if (existing) conflicts.push({
@@ -371,7 +363,7 @@ function applyPresets(config, presets = []) {
 * Resolve preset input to PresetResult
 */
 function resolvePresetInput(preset) {
-	if (typeof preset === "object" && ("middlewares" in preset || "additionalRoutes" in preset)) return preset;
+	if (typeof preset === "object" && ("middlewares" in preset || "routes" in preset)) return preset;
 	if (typeof preset === "object" && "name" in preset) {
 		const { name, ...options } = preset;
 		return resolvePreset(name, options);
@@ -383,9 +375,9 @@ function resolvePresetInput(preset) {
 */
 function mergePreset(config, preset) {
 	const result = { ...config };
-	if (preset.additionalRoutes) {
-		const routes = typeof preset.additionalRoutes === "function" ? preset.additionalRoutes(config.permissions ?? {}) : preset.additionalRoutes;
-		result.additionalRoutes = [...result.additionalRoutes ?? [], ...routes];
+	if (preset.routes) {
+		const resolved = typeof preset.routes === "function" ? preset.routes(config.permissions ?? {}) : preset.routes;
+		result.routes = [...result.routes ?? [], ...resolved];
 	}
 	if (preset.middlewares) {
 		result.middlewares = result.middlewares ?? {};

package/dist/{queryCachePlugin-BCFVXnxK.d.mts → queryCachePlugin-CnTZZTC5.d.mts}

@@ -1,4 +1,4 @@
-import { i as CacheStore } from "./interface-bpoLKKqx.mjs";
+import { i as CacheStore } from "./interface-DplgQO2e.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/cache/QueryCache.d.ts

package/dist/{redis-stream-BgrYzpeq.d.mts → redis-stream-D54N5oXs.d.mts}

@@ -1,4 +1,4 @@
-import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "./EventTransport-CLXJUzyT.mjs";
+import { i as EventTransport, n as EventHandler, r as EventLogger, t as DomainEvent } from "./EventTransport-CinyO7zQ.mjs";
 
 //#region src/events/transports/redis-stream.d.ts
 interface RedisStreamLike {

package/dist/{redis-Bunu3qWg.d.mts → redis-z3sFr1UP.d.mts}

@@ -1,4 +1,4 @@
-import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-CkkWm5uR.mjs";
+import { n as IdempotencyResult, r as IdempotencyStore } from "./interface-B-pe8fhj.mjs";
 
 //#region src/idempotency/stores/redis.d.ts
 interface RedisClient {

package/dist/registry/index.d.mts

@@ -1,4 +1,4 @@
-import { Gt as RegisterOptions, H as IntrospectionPluginOptions, Kt as ResourceRegistry } from "../interface-CS6d7HiB.mjs";
+import { Gt as RegisterOptions, H as IntrospectionPluginOptions, Kt as ResourceRegistry } from "../interface-BVuMfeVv.mjs";
 import { FastifyPluginAsync } from "fastify";
 
 //#region src/registry/introspectionPlugin.d.ts

package/dist/registry/index.mjs

@@ -1,3 +1,3 @@
 import { n as introspectionPlugin_default, t as introspectionPlugin } from "../registry-B0Wl7uVV.mjs";
-import { t as ResourceRegistry } from "../ResourceRegistry-Dtcojmu8.mjs";
+import { t as ResourceRegistry } from "../ResourceRegistry-Dq3_zBQP.mjs";
 export { ResourceRegistry, introspectionPlugin_default as introspectionPlugin, introspectionPlugin as introspectionPluginFn };